Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F69D7E72F44E11EFB88BE2AD762E951A.roa
File: F69D7E72F44E11EFB88BE2AD762E951A.roa (raw, json)
Hash identifier: fPN8aCXaOubZrUVL09GGYlmvgvXhjrh3+uTYsr35ncc=
Subject key identifier: 94:DC:BD:62:5F:15:88:B3:04:5E:B2:00:18:E4:2B:B5:6A:56:EB:83
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016460
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F69D7E72F44E11EFB88BE2AD762E951A.roa
Signing time: Wed 26 Feb 2025 14:35:45 +0000
ROA not before: Wed 26 Feb 2025 14:35:42 +0000
ROA not after: Sat 19 Feb 2028 14:35:42 +0000
asID: 17561
IP address blocks: 154.82.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91232 (0x16460)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 14:35:42 2025 GMT
Not After : Feb 19 14:35:42 2028 GMT
Subject: CN=67bf26c1-6f17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ab:46:f4:82:0d:8a:47:22:ee:b1:16:de:01:
f2:d2:a1:7f:0a:b7:96:98:c3:37:7a:e8:db:b8:fe:
08:c0:e4:01:e9:90:0a:e5:48:61:92:96:9c:a3:21:
83:70:7f:ae:e4:3b:93:af:a4:b6:e3:17:c6:4c:a5:
f4:6e:e6:b7:40:24:f5:e9:9f:df:4d:1c:f1:bf:42:
0a:bd:14:da:62:91:09:f2:d9:64:4a:45:d5:73:c3:
75:23:86:b4:11:77:61:d3:da:d2:5a:82:04:0a:f3:
3c:98:9e:ad:37:c0:06:1d:ef:73:72:2c:9e:2a:07:
54:b7:f7:69:64:bf:fd:c8:af:83:4a:fe:39:ff:26:
e8:3c:29:54:31:48:e2:2e:da:c1:72:2d:6a:d3:c4:
c5:28:ea:25:e7:05:10:e3:46:49:e6:24:8f:53:07:
23:16:3e:e6:fb:a1:fc:85:b1:48:d6:6d:c3:d3:8f:
73:fa:56:17:57:28:af:c7:31:62:cf:e1:53:0b:2a:
63:8b:1f:b4:4d:95:02:35:48:3a:78:79:3f:60:e5:
ef:d8:f3:b7:dc:b7:a2:90:1d:ad:95:be:31:50:81:
9e:ee:66:ec:fc:1b:3c:76:ac:4c:4d:18:78:a7:1b:
70:fa:21:b8:70:49:2f:7a:b9:df:df:bc:65:f8:4d:
57:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:DC:BD:62:5F:15:88:B3:04:5E:B2:00:18:E4:2B:B5:6A:56:EB:83
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F69D7E72F44E11EFB88BE2AD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.213.0/24
Signature Algorithm: sha256WithRSAEncryption
62:41:50:da:61:36:ff:36:9e:93:69:dd:b5:09:a6:3b:1f:a3:
8a:f2:d1:ff:9c:66:f6:21:e0:a9:42:fe:0c:53:37:93:93:d9:
b0:20:ae:14:4d:83:89:61:b3:c1:ed:e2:ed:79:34:77:be:e0:
96:97:4f:b0:f8:7e:57:e4:9e:5e:07:21:9d:a1:a7:fb:1e:1f:
d8:9c:41:b9:45:8b:74:14:35:be:b7:35:35:99:92:9d:73:a6:
b7:0e:e7:64:69:2a:4e:5a:e3:b9:17:ed:dc:a5:e5:5a:20:99:
9b:62:87:17:0e:10:7a:b1:9a:f8:bc:52:df:2d:21:89:72:f5:
91:a3:58:ec:1b:bc:71:60:0e:5a:83:ec:bf:a4:1a:33:71:e7:
4c:6d:9f:f8:93:68:a6:01:30:8f:8f:0e:27:f3:b3:eb:d0:98:
31:a0:3d:cd:d3:57:79:b1:b9:2c:36:04:53:c2:eb:79:bc:75:
08:16:d5:f3:5f:e4:40:7a:6f:89:4a:d6:d4:2f:1b:61:a0:9d:
6d:36:65:9e:bf:8b:0f:6c:a3:77:2c:4c:2a:cd:c4:3b:cd:41:
52:ca:81:b2:6f:f0:68:64:12:e6:a2:70:c2:5e:c1:2c:b8:30:
bb:ee:de:e4:87:8c:de:cd:0f:13:27:75:ea:8f:69:8e:0e:9c:
0d:43:02:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 01:43:57 2025 by rpki-client